$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/e08a62cd-b2f1-3a90-b0e6-f8c1dd9b5e04.roa File: e08a62cd-b2f1-3a90-b0e6-f8c1dd9b5e04.roa (raw, json) Hash identifier: 11rEXHIhSLzBnaPBVlNfjYT5jYXAdpkmXh5l2g1PDAE= Subject key identifier: B3:63:45:D7:5C:24:36:1B:F7:46:F0:E6:7F:C1:48:2E:F5:F4:8C:AA Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F4328584F3B7D21729357DD3F341F5C00 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/e08a62cd-b2f1-3a90-b0e6-f8c1dd9b5e04.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 49915 IP address blocks: 209.165.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:21:72:93:57:dd:3f:34:1f:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=b0cd353a-305a-48bf-ad01-e04a9e4f94b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:2b:27:b9:60:8f:f6:82:1b:dc:f3:90:aa: 68:ce:e6:15:54:11:9c:b9:17:af:50:42:9a:40:47: fb:d9:c3:ce:1a:c9:d9:cd:d0:2f:2b:e0:78:da:0c: 17:73:68:67:25:f5:1f:ba:5f:79:bd:5b:ca:3f:9e: ca:de:70:10:76:dd:15:b1:5a:f3:85:44:68:ee:9f: 95:98:1e:2c:6a:c1:0f:dc:66:d2:5b:92:ef:03:f0: a7:49:d1:5f:16:b2:c6:73:ee:53:19:00:29:b8:d8: 98:e0:ea:f1:59:c7:25:26:d1:a0:a9:55:29:9d:e0: 64:ae:95:a9:f8:c6:b1:48:01:e2:90:54:f1:5f:8c: 41:f3:b0:e8:80:d1:76:3c:48:f5:b1:4e:3e:ae:b8: dc:8e:6c:65:3f:a8:50:8f:46:e3:34:e6:42:3f:ab: 66:42:58:4a:57:6c:8e:05:96:84:53:35:2c:b3:77: 00:4d:6c:a1:b1:1a:f9:ee:d2:60:f6:47:5a:20:ac: 16:93:53:73:19:59:dc:7c:11:0f:c0:5e:67:9f:8d: 1e:51:52:ea:74:28:45:16:44:e8:1c:e0:0b:03:c6: 1c:61:ed:dd:c0:85:c5:f8:92:41:db:de:81:03:a8: fe:74:02:35:bc:25:3c:8d:cb:77:6e:e3:9c:50:9f: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:63:45:D7:5C:24:36:1B:F7:46:F0:E6:7F:C1:48:2E:F5:F4:8C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/e08a62cd-b2f1-3a90-b0e6-f8c1dd9b5e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: 209.165.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:fa:59:0e:82:4e:9f:07:45:8c:73:93:7e:7f:d8:32:62:f6: 0f:85:65:2f:6b:ab:3b:41:a3:0d:36:c5:8f:3f:97:e2:1c:1d: d9:3c:96:fd:5e:b9:97:7d:60:b2:5d:cc:0a:26:4f:e7:c6:75: 93:de:34:2b:05:3f:46:48:80:0d:53:f7:1d:04:ca:26:71:ea: 86:5e:57:ef:6b:67:16:0e:a9:a2:2f:8b:df:a3:ca:d4:7c:78: bb:6d:6a:fc:f7:fc:b3:c7:c2:b5:07:bc:bd:a4:44:5e:64:67: 50:cd:fa:50:22:4f:8f:43:c3:91:a4:07:28:32:c7:14:66:ab: 65:cc:c6:cf:7e:3f:5c:4d:01:65:b2:bd:d4:82:41:72:5e:9b: 1a:7c:78:57:db:58:4d:e3:16:ee:a7:a9:d8:75:ad:5c:21:08: 10:56:1d:52:85:b9:e4:62:77:c8:ab:66:58:99:da:6d:9d:d6: b5:e0:3e:9f:4e:25:92:f3:27:44:8e:95:dc:c8:cf:f3:f5:3c: 2c:ed:35:6a:b1:66:7e:ad:d2:44:b5:70:9b:3c:70:61:4e:bb: ac:78:71:01:ad:20:b0:44:4c:b7:5e:f3:d5:85:c4:e2:2d:85: 8b:40:f3:51:eb:82:b7:d0:06:81:7c:66:ab:c9:ed:51:bd:33: 6a:37:cb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSFyk1fdPzQfXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk YjBjZDM1M2EtMzA1YS00OGJmLWFkMDEtZTA0YTllNGY5NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg4rJ7lgj/aCG9zzkKpozuYVVBGcuRevUEKa QEf72cPOGsnZzdAvK+B42gwXc2hnJfUful95vVvKP57K3nAQdt0VsVrzhURo7p+V mB4sasEP3GbSW5LvA/CnSdFfFrLGc+5TGQApuNiY4OrxWcclJtGgqVUpneBkrpWp +MaxSAHikFTxX4xB87DogNF2PEj1sU4+rrjcjmxlP6hQj0bjNOZCP6tmQlhKV2yO BZaEUzUss3cATWyhsRr57tJg9kdaIKwWk1NzGVncfBEPwF5nn40eUVLqdChFFkTo HOALA8YcYe3dwIXF+JJB296BA6j+dAI1vCU8jct3buOcUJ+74QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNjRddcJDYb90bw5n/BSC719IyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvZTA4YTYyY2QtYjJmMS0z YTkwLWIwZTYtZjhjMWRkOWI1ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFX6WQ6CTp8HRYxzk35/2DJi9g+FZS9rqztBow02xY8/l+IcHdk8lv1e uZd9YLJdzAomT+fGdZPeNCsFP0ZIgA1T9x0EyiZx6oZeV+9rZxYOqaIvi9+jytR8 eLttavz3/LPHwrUHvL2kRF5kZ1DN+lAiT49Dw5GkBygyxxRmq2XMxs9+P1xNAWWy vdSCQXJemxp8eFfbWE3jFu6nqdh1rVwhCBBWHVKFueRid8irZliZ2m2d1rXgPp9O JZLzJ0SOldzIz/P1PCztNWqxZn6t0kS1cJs8cGFOu6x4cQGtILBETLde89WFxOIt hYtA81HrgrfQBoF8ZqvJ7VG9M2o3y9E= -----END CERTIFICATE-----Generated at Sun Oct 11 22:57:22 2026 by rpki-client